Dov Yoran

In the market for a cloud access security broker (CASB)? CSO Online shared what you should consider when selecting the right solution for your enterprise, noting that Proofpoint's CASB provides granular visibility into who interacts with your data.

7

Exploitation timelines are increasingly measured in days rather than weeks. Our latest report from Rapid7 Labs correlates vulnerability publication data, confirmed exploitation trends, frontline MDR incident response telemetry, and dark web, cybercrime, and nation-state intelligence to provide a unified view of how exposure evolves into compromise. One of the biggest standouts: how rapidly AI is being integrated into attacker playbooks, accelerating the operationalization of exposure. Many of the incidents we investigate still originate from known, unaddressed exposure. In those cases, attackers don’t need sophistication - they need opportunity. As remediation windows shrink, reducing that opportunity becomes essential to limiting compromise. You can download the 2026 Global Threat Landscape report here: https://r-7.co/4bQOAtq #infosec #cybersecurity

37

1 Comment

I'd like to think that people would recognize an obvious point here. Safe, which relies on FAIR analytics, was miles ahead of even the other CRQ leaders in Forrester's analysis (and Safe isn't the only FAIR-based player in the market). If this doesn't blow a great big gaping hole in ridiculous claims that FAIR is somehow irrelevant in 2025, I don't know what will. Unfortunately, many of these claims about FAIR are driven by one of two things -- 1) ignorance, or 2) misinformation for competitive messaging. As far as ignorance goes, very often that's simply a mistaken belief that FAIR is dependent on SME estimates and/or relies solely on betaPERT distributions. Neither is true. If you have empirical data, FAIR can consume it. If you want to use a different distribution, FAIR's fine with that too. FAIR is a model, folks. It defines factors and their relationships -- period. As such, there are many ways to implement it, each with its strengths and weaknesses. Furthermore, FAIR describes how risk works, which doesn't change as the risk landscape changes. Yes, the details of the risk landscape (e.g., threats, assets, controls, etc.) change over time, but how RISK works (and therefore FAIR) is resilient to these changes. Think of this as being similar to Copernicus' observations of the solar system -- elliptical orbits, etc. Those observations describe how the solar system appears to behave. You may discover (or remove) planets but the nature of the system remains unchanged. I'm excited for my friends at Safe, who have worked very hard to get the product to where it is. But let's also recognize that CRQ is still largely thought of as a nice-to-have, and we're only going to overcome that by educating the market and raising risk measurement expectations, and not through misrepresentations.

116

11 Comments

When security tools are overly inflexible, they can hinder innovation and expose your team to risks. The solution is adaptive security that meets your needs. 🔐 The eBook titled "The Decision-maker's Guide to Comprehensive Security" explores how Microsoft provides protection that balances flexibility and effectiveness. With advancements in AI and diminished breach risks, this guide aids leaders in crafting a strategy that safeguards the present and plans for the future. Get your free copy to learn how customized security can drive your success.

1

1 Comment

Cybercriminals don’t hack in anymore. They log in. Why spend months trying to crack an enterprise-grade firewall when you can spend 10 minutes phishing an executive’s personal Gmail or compromising their home Wi-Fi? The Path of Least Resistance has shifted from the server room to the living room. To put some data behind this trend, BLACKCLOAK recently collaborated with Techstrong Group to release a new PulseMeter Report. This research provides a data-driven look at the current state of Digital Executive Protection and underscores why securing the personal digital lives of your most high-value targets is no longer a luxury, it’s a strategic necessity. If your 2026 security strategy doesn't extend to the personal digital lives of your leadership, you aren't just leaving the door unlocked; you’re leaving the keys in the ignition. Check out the full report and the "Path of Least Resistance" insights here: https://lnkd.in/eUwB-zsW #CyberSecurity #CISO #ExecutiveProtection #DigitalRisk #DataPrivacy

21

2 Comments

Cyberattacks are getting smarter. Are your defenses keeping up? AI can help you: * Spot threats in real time * Predict risks before they spread * Cut through alert noise * Respond faster * Meet compliance needs But tools alone aren’t enough. You need the right strategy. See how AI + expert guidance can improve your cybersecurity. Read the full post: https://hubs.la/Q03szv3J0 #Cybersecurity #AI #ArtificialIntelligence #Compliance

20

🔒DeCYFIR 2025 Impact Recap: Leading the Shift to Preemptive Cybersecurity 🔒 In 2025, DeCYFIR delivered proven preemptive cybersecurity and advanced predictive threat intelligence, empowering organizations to anticipate and prevent attacks before they occur. Key Measurable Results: 👇 Financial Safeguard - Prevented US$5.5 billion in potential cyber losses [tangible and intangible] Worldwide Trust & Adoption - 900+ enterprise licenses deployed globally - Trusted by 20% of governments and federal agencies Proactive Threat Neutralization - Issued 7158+ early warnings – weeks to months in advance - Managed 1.8+ million attack surfaces - Neutralized 2.1+ million cyber risks - Secured 27582+ domains AI-Driven Insights & Defense - Empowered 14600+ users via Ask DeCYFIR AI Agent - Detected & mitigated 6456+ deepfakes - Tracked 5235+ threat actors - Monitored 7298+ active hacking campaigns - Identified 682K unique threat indicators Supply Chain & Ecosystem Protection - Secured 82K third-party entities - Delivered 83 intelligence-led cyber programs - Deployed 16 deception environments to lure and trap attackers DeCYFIR is transforming cybersecurity—moving beyond frantic, reactive firefighting to powerful predictive and preemptive defense that neutralizes threats before they even materialize. The Future of Cyber Defense is Preemptive. Join the shift. #PreemptiveCybersecurity #PreemptiveCyberDefense #PredictiveThreatIntelligence  #ExternalThreatLandscapeManagement #AIinCybersecurity #DeCYFIR #CYFIRMA

102

7 Comments

Is there a gap between your vulnerability management policy and your team's actions? Our latest article on enhancing Remediation Policies and SLAs might be the key. By aligning your practices with industry benchmarks, you not only create accountability but also shape your remediation efforts to be consistent and timely. Discover how to define critical components and benchmark your SLAs to stay ahead of the curve in security. #CyberSecurity #ITbestPractices #RiskManagement #CloudSecurity #VulnerabilityManagement #SLA #EnterpriseSecurity #DataProtection https://lnkd.in/eNUe8z2w

1

One of the most actionable tips in Deepwatch’s new CISO 100 Days guide is simple but powerful: Executives don’t want dashboards. They want decisions. When reporting up: ✅ Translate alert tuning into reduced dwell time ✅ Tie detection improvements to uptime and customer trust ✅ Map telemetry to business systems, not log counts This is how security becomes a strategic function, not just a reactive one. 💡 Tip: Use “decision deltas” to anchor your board updates: What changed, why it mattered, and what action you took. #CISO

3

1 Comment

Beazley Security's Security Posture Reports are used to assess risk in underwriting but are now available to any organization to provide a point in time view of their external attack surface. Learn how you can access at: https://lnkd.in/gwbMXWsb. Next up, we're going to make this functionality continuous and available as service through the VERACIS™ client portal.

36

I knew when Jim Alkove presented at our CISO / Risk Executive Workshop in Jackson Hole a year ago that there was a need to build something with viable and important recommendations for the future of identity management. Through the collaborative efforts of subject matter experts and leading practitioners active in the #SINETCommunity, this handbook is a tangible example of how SINET fosters opportunities for thought leadership and knowledge sharing to defeat global cybersecurity threats. Thank you to Jim and the SINET Working Group for their extensive work on this. http://bit.ly/3TUyaqu

47

3 Comments

Beyond the Booth: Maximize Your Investment at RSAC Conference. ✨ Read some of my tips and tricks on how to build a smarter RSAC marketing strategy that goes "Beyond the Booth" and how Aventi Group, Product Marketing Agency can support your team WHILE you are at the show! https://lnkd.in/e26gtrfW “#RSAC isn’t just another event. It’s where your narrative either lands or gets lost. If your message isn’t clear, differentiated, and built to scale across every touchpoint, you’re leaving impact on the table.”

11